Linux Forensic Analysis reading

Chanko86 · 2010-02-16T19:57:32Z

I'm looking for a book or articles/papers covering Linux system log analysis and Linux artifact analysis such as internet artifacts, application artifacts etc. I have read Chris Pogue's UNIX and Linux Forensic Analysis book, but it didn't quite get into the detail I was looking for, for the mentioned topics above. I've been searching on Google and all I seem to end up with is tools to do the jobs, but no actual how, why, details or they seem to deal with logs for intrusion analysis. Kind of hoping to find something that goes into similar detail to the EnCE Official Study Guide by Bunting, but for Linux and doesn't have to be tool specific. Anybody have any ideas?

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by azrael 16 years ago

11 Posts

6 Users

0 Reactions

1,602 Views

RSS

azrael

(@azrael)

Honorable Member

Joined: 20 years ago

Posts: 658

17/02/2010 2:16 pm

On reflection - you might like to have a look at Brian Carrier's "File System Forensic Analysis" he covers off EXT2 & EXT3 as well as the usual NTFS/FAT suspects.

ReplyQuote

Page 2 / 2 Prev